Path: csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod From: Jeremy Stanley Newsgroups: linux.debian.maint.python Subject: Re: #!/usr/bin/python3 vs virtualenv Date: Fri, 03 Mar 2023 21:50:02 +0100 Message-ID: References: X-Mailbox-Line: From debian-python-request@lists.debian.org Fri Mar 3 20:43:37 2023 Old-Return-Path: X-Amavis-Spam-Status: No, score=-12 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, PGPSIGNATURE=-5] autolearn=ham autolearn_force=no X-Policyd-Weight: using cached result; rate:hard: -4.6 MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="e6uq4dgfbdpzpxco" Content-Disposition: inline User-Agent: NeoMutt/20170113 (1.7.2) X-Sa-Exim-Connect-IP: 2001:4802:7801:102:be76:4eff:fe20:63e0 X-Sa-Exim-Rcpt-To: debian-python@lists.debian.org X-Sa-Exim-Mail-From: fungi@yuggoth.org X-Sa-Exim-Scanned: No (on azathoth.yuggoth.org); SAEximRunCond expanded to false X-Mailing-List: archive/latest/20867 List-ID: List-URL: List-Archive: https://lists.debian.org/msgid-search/20230303204314.f663ltpcjhg3iyzt@yuggoth.org Approved: robomod@news.nic.it Lines: 62 Organization: linux.* mail to news gateway Sender: robomod@news.nic.it X-Original-Date: Fri, 3 Mar 2023 20:43:14 +0000 X-Original-Message-ID: <20230303204314.f663ltpcjhg3iyzt@yuggoth.org> X-Original-References: <1c48b573-b3cd-0eb8-4493-752dd9d0c3fa@inria.fr> <9193D789-A0A4-4883-B2AC-3CBFF1ED3444@ubuntu.com> <20230303191648.zhsf7b5bukvwcgmh@yuggoth.org> Xref: csiph.com linux.debian.maint.python:14965 --e6uq4dgfbdpzpxco Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2023-03-03 15:29:09 -0500 (-0500), Jorge Moraleda wrote: > Would it be hard to support both philosophies? >=20 > I would like to suggest a couple of configuration options that by default > disallow using pip outside a virtual environment but that users with root > privilege can modify by editing a config file (probably somewhere in /etc) > and that would enable using pip outside a virtual environment, both as ro= ot > and as regular user respectively. >=20 > I feel this would satisfy the needs of regular users to be protected > against accidentally breaking their system while enabling power users to > have full control of their computer and enjoy the simplicity of a single > environment. Clearly this discussion suggests that debian has both types = of > users and we should support them both if we can. [...] "Power users" who like to break their systems can simply `sudo pip install --break-system-packages foo` or even just `sudo rm /usr/lib/python3.11/EXTERNALLY-MANAGED` and then do whatever they want anyway. It doesn't seem to me like there's much need for a config option that does that for you, and adding one would imply that Debian will help you fix things once you've done it. This feature is simply a guard rail for users who otherwise wouldn't know where the edge of that cliff is located. There are already solutions for your power users, but as is often said in such situations: If it breaks you get to keep the pieces. Have fun! --=20 Jeremy Stanley --e6uq4dgfbdpzpxco Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEl65Jb8At7J/DU7LnSPmWEUNJWCkFAmQCW9ZfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDk3 QUU0OTZGQzAyREVDOUZDMzUzQjJFNzQ4Rjk5NjExNDM0OTU4MjkACgkQSPmWEUNJ WCmxzA/9EusnW2GK8l+4JW/y72YL5Z89UyxG9MneN/lKoqJTNPizHWXFgScrBW11 B9mhT9tVkHpN9fBlcf2ThG3m3IOCLtrQlSV0gAoVUCuaPVBDc9cU/WBySCEGMAYe 6/ibI3Mpl7oVCv1E+qxB19IPTlrkSjR9Zxk7At7Sa2zk16q9rtWRwqDCEMbmy+sg WGgniViy2CiB+GppwJ+fz9vCjwswvFxfrlo9mip6eo5yvvjdAAeZsm+nnz8lQboU PWE+rtttuZT1qJ5kZpiXEC60Q5Jg0WI7APLipr1V/19fUFIxleeTTpzG+jsba6z6 U1L604MrmPSN/H+O27IxXDpxkvo4UTSzUYSitr2IYVOXcdBIJEbegCKhqpC9OmVP mpWjrwM++Jge5eIRZUBFAFX+Yo2BSmly2YQONTAI7gGDnDiVggvhtG9pHZN5vHeu Oxc5IOW3PtrGrOOtUqkPSDj9IMJ1pqd40VbYENlpEZiTwCF5s8CRW5kxCcZOoXE2 PgLgG/bk+G7etr9DzZAzG55MTT2xOao7wQEntIZ0MDVpHtXdH6zB1xa+G1MdvoMr DgagO1oHJWffTA7SvQagdlFaHFPL85Dmz8BIk8+QACvRDui3MNasbWieoFIrwXe6 TUfQN9u+LepznAEH/IiNfJ0+0GjN5A7UF4yUT8nDOv4abRbRAhw= =QHpx -----END PGP SIGNATURE----- --e6uq4dgfbdpzpxco--